XSS in Lukas12000 Photobooth

CVE-2026-27020

Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (17.4th percentile) — read the EPSS interpretation.